BlackSuit Ransomware Strikes Windows and Linux Users

BlackSuit is a recently observed ransomware family with Windows and Linux variants that targets enterprise environments including VMware virtual machines; the report provides a technical analysis of its behaviors (command-line parameters, mutex/single-instance checks, network share enumeration and lateral movement, shadow copy deletion, VM process termination, AES file encryption, and optional self-deletion), lists sample hashes as IOCs, maps observed techniques to MITRE ATT&CK, and offers defensive recommendations.